Official Policy

Privacy Policy bmw2u
Personal Data Protection for Malaysian Members

Bmw2u takes the protection of every member's personal data seriously. This Privacy Policy transparently sets out how we collect, store, use and protect your information – in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA).

Updated: January 2026  |  Applicable to Malaysian members
256-bit SSL Encryption
No Sale of Data to Third Parties
PDPA Malaysia 2010 Compliant
Member Data Controls
Data Not Transferred Without Consent

Six Privacy Commitments bmw2u to You

Before reading the full Privacy Policy, here are the six core principles behind how bmw2u protects your personal data.

🔐
Bank-Grade Encryption
All data transmitted between your device and bmw2u's servers is protected using 256-bit SSL/TLS encryption – the same security standard used by Maybank2u and CIMB Clicks. Your password is stored in hashed form that cannot be decrypted by anyone, including bmw2u staff.
Technical Security
🚫
No Sale of Data to Third Parties
bmw2u has never sold, rented or shared your personal data with any third party for marketing purposes, and never will. Your data belongs to you alone. We only share data with specific parties required for platform operations – and even then, only under strict safeguards.
Data Protection
⚖️
PDPA Malaysia 2010 Compliant
The bmw2u Privacy Policy is fully aligned with Malaysia's Personal Data Protection Act 2010 (PDPA). This means you have rights protected under Malaysian law regarding how bmw2u handles your personal data.
Legal Compliance
👤
Full Member Control
You have the right to access, correct, delete, and restrict the use of your personal data at bmw2u. Data-related requests can be submitted to our team at any time and will be processed within 14 business days.
Member Rights
🍪
Transparent & Controllable Cookies
bmw2u uses cookies to enhance the user experience and analyse platform performance. You have the option to manage cookies through your browser settings. We do not use cookies to track your activity outside of the bmw2u platform.
Cookie Management
🔔
Data Breach Notification
In the event of a data breach that may affect your personal information, bmw2u is committed to notifying affected members within 72 hours of becoming aware of the incident – in line with global industry best practices.
Incident Transparency

1 Introduction – bmw2u's Privacy Commitment

Bmw2u ("Platform", "We", "Company") respects the privacy of every individual who uses our platform. This Privacy Policy explains in detail how bmw2u collects, stores, uses, discloses and protects your personal data when you register, access or use any service provided by bmw2u – including Sports Betting (Malaysia Super League football, EPL, IPL cricket), Live Casino, online poker, e-sports and virtual sports.

By registering a bmw2u account or using our platform in any way, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your personal data as described herein. If you do not agree with any part of this policy, you should not use the bmw2u platform.

This Privacy Policy is drafted in accordance with Malaysia's Personal Data Protection Act 2010 (PDPA) and complies with internationally recognised data protection principles. As the personal data controller, bmw2u bears full responsibility for processing members' personal data in accordance with applicable laws.

This Privacy Policy is a living document that is reviewed periodically. This is the current version in effect from January 2026. Any material changes will be communicated to all registered bmw2u members via email or in-platform notification.

2 Personal Data We Collect

Bmw2u only collects personal data that is strictly necessary to provide platform services to you. We do not collect excessive data that is unrelated to platform operations.

Data Category Example Information Primary Purpose
Identity Data Full name, national ID number, date of birth, gender Identity verification & KYC compliance
Contact Data Malaysian phone number, email address, mailing address Account communications & customer support
Financial Data Bank account numbers, e-wallet numbers (Touch 'n Go, GrabPay, DuitNow), transaction history in MYR Deposit & withdrawal processing
Technical Data IP address, device type, browser, operating system, log data Platform security & improvement
Activity Data Betting history, games played, access times, platform preferences Personalise your experience & responsible gaming
Communication Data Live chat records, support emails, complaint tickets Customer support & service improvement

⚠️ Sensitive Data: bmw2u does not collect sensitive data such as medical information, religion, political views or biometrics unless specifically required by applicable Anti-Money Laundering (AML) laws.

3 How bmw2u Collects Personal Data

Bmw2u collects your personal data through various channels during your interactions with our platform:

  • Account Registration: When you complete the bmw2u registration form with your personal information.
  • Identity Verification (KYC): When you submit verification documents such as a copy of your Malaysian identity card or bank statement.
  • Financial Transactions: When you make a deposit via Touch 'n Go eWallet, GrabPay, Boost, ShopeePay, DuitNow or FPX, or submit a withdrawal request to your Malaysian bank account.
  • Platform Usage: Automatically via cookies and similar tracking technologies as you browse and use the bmw2u platform.
  • Support Communications: When you contact the bmw2u customer support team via live chat, email or WhatsApp.
  • Referral Programme: When you or a friend registers via a referral link you have shared.

4 Purposes of Personal Data Use

Bmw2u uses the personal data it collects for the following lawful and limited purposes:

  • To create and manage your bmw2u member account.
  • Processing Malaysian Ringgit (MYR) deposits and withdrawals of winnings to your Malaysian bank account or e-wallet.
  • To verify your identity in order to meet Anti-Money Laundering (AML) and Know Your Customer (KYC) legal compliance requirements.
  • Providing effective customer support in Bahasa Malaysia.
  • To send you important information relating to your account, security and changes to our terms.
  • Sending promotional and bonus notifications – only if you have agreed to receive marketing communications.
  • To detect and prevent fraud, money laundering and other illegal activities on the bmw2u platform.
  • To analyse platform usage data on an aggregate (non-individual) basis for product and service improvement purposes.
  • Complying with court orders or lawful requests from Malaysian authorities.
  • Supporting the Responsible Gaming programme by monitoring betting patterns that may indicate problem gambling.

bmw2u will not use your personal data for any purpose beyond those listed above without obtaining your prior consent. You may withdraw consent to receive marketing communications at any time through your account settings or by contacting bmw2u customer support.

5 Personal Data Sharing & Disclosure

Bmw2u does not sell your personal data to any third party. However, in the course of operating the platform, we may need to share your personal data with a limited set of parties as follows:

  • Payment Processors: Payment service providers that process Touch 'n Go, GrabPay, DuitNow, FPX, and other Malaysian e-wallet transactions to facilitate MYR deposits and withdrawals.
  • Identity Verification Service Providers: Companies that assist bmw2u in carrying out KYC and AML checks as required by law.
  • Technology Infrastructure Provider: Cloud computing and hosting companies that store bmw2u platform data in a secure environment.
  • Malaysian Authorities: Law enforcement agencies, courts or regulatory bodies when required under Malaysian law.

All third parties who receive personal data of bmw2u members are required to maintain the confidentiality of that data and use it only for the purposes specified in their service agreement with bmw2u. They are not permitted to use your data for any other purpose or disclose it to any other party without bmw2u's written consent.

⚠️ International Data Transfers: Where your personal data needs to be transferred to servers located outside Malaysia, bmw2u will ensure adequate protections are in place in accordance with the requirements of Malaysia's PDPA 2010, including appropriate data transfer agreements.

6 Data Security Measures

Bmw2u continually invests in cybersecurity infrastructure to protect members' personal data from unauthorised access, loss, destruction, or disclosure. Key security measures we employ include:

  • 256-bit SSL/TLS Encryption for all communications between your device and bmw2u's servers.
  • Password hashing using strong algorithms – no one, including bmw2u's technical team, can view your password in plain text.
  • Two-Factor Authentication (2FA) available to all members as an additional layer of security.
  • Role-based access control (RBAC) ensuring that only authorised personnel can access sensitive member data.
  • Regular security audits by an independent third party to identify and address system vulnerabilities.
  • 24/7 threat monitoring by bmw2u's cybersecurity team to detect suspicious activity in real time.
  • Secure data backup to ensure your data is not lost even in the event of a system failure.

While bmw2u takes all reasonable steps to protect your data, no digital system can be guaranteed 100% secure. You are also responsible for keeping your account secure by using a strong password and not sharing your login credentials with anyone.

7 Personal Data Retention Period

Bmw2u retains your personal data only for as long as necessary to fulfil the purpose for which it was collected, or as required by Malaysian law.

  • Active Account Data: Retained for as long as your account remains active on the bmw2u platform.
  • Financial & Transaction Data: Retained for a minimum of 7 years from the transaction date, in line with Malaysia's tax and AML legal requirements.
  • Security Log Data: Retained for 12 months for security incident investigation purposes.
  • After Account Closure: Data not required to be retained by law will be deleted or anonymised within 90 days of account closure being confirmed.

When personal data is no longer needed, bmw2u will ensure it is securely deleted or anonymised so that it can no longer be linked to your identity.

8 Cookie Policy

The bmw2u platform uses cookies and similar tracking technologies to enhance functionality, security and the user experience. Cookies are small text files stored in your device's browser when you visit the bmw2u platform.

Types of cookies used by bmw2u:

  • Essential Cookies: Required for core platform functions such as login, session security and navigation. These cookies cannot be disabled without affecting platform functionality.
  • Performance Cookies: Collecting information on how you use the bmw2u platform to help us identify and resolve technical issues.
  • Functional Cookies: To remember your preferences such as language, preferred bet values and other personal settings to enhance your experience.
  • Analytical Cookies: To help us understand platform usage patterns on an aggregate basis – this information does not contain any personally identifiable data.

You can manage or disable cookies through your browser settings at any time. However, disabling certain cookies may affect the functionality of the bmw2u platform.

9 Your Rights as a Data Subject

As a bmw2u member whose personal data we process, you have the following rights under Malaysia's PDPA 2010. Click on each right to find out how to exercise it.

You have the right to request a copy of all personal data bmw2u holds about you. This request can be made by emailing support@bmw2u.biz with the subject line "Data Access Request". bmw2u will fulfil this request within 14 business days. A copy of your data will be sent in a secure format to your account's registered email address.

If you find that the personal data bmw2u holds about you is inaccurate or out of date, you may request a correction through your account profile settings or by contacting customer support. Corrections will be processed within 7 business days. Supporting documents may be required for certain corrections such as name or date of birth.

You may request that bmw2u delete your personal data under certain circumstances – for example, when the data is no longer needed for its original purpose or when you withdraw your consent. However, deletion cannot be carried out for data we are legally required to retain under Malaysian law, such as financial records for a minimum period of 7 years.

You may object to the processing of your personal data for direct marketing purposes at any time. This includes opting out of promotional emails, bonus notifications and other marketing communications from bmw2u. An unsubscribe option is available in every marketing email or through the notification settings in your bmw2u account.

You may request bmw2u to provide your personal data in a machine-readable format (such as JSON or CSV) so that you can transfer it to another platform if you wish. This request can be submitted via customer support and will be processed within 14 business days.

To exercise any of the above rights, contact us at support@bmw2u.biz with an appropriate subject line. We will verify your identity before processing any data-related request to ensure the security of your account.

10 Child Protection

The bmw2u platform is strictly for adult users aged 18 and above. bmw2u does not knowingly collect or process personal data from children under the age of 18.

If a parent or guardian discovers that their child has registered a bmw2u account or provided personal data without authorisation, please contact us immediately at support@bmw2u.biz. We will take prompt action to close the account and delete all associated personal data within 48 hours.

11 Changes to the Privacy Policy

Bmw2u reserves the right to update or amend this Privacy Policy from time to time in response to changes in law, technology, or platform operations. When we make material changes, we will:

  • Updating the "Last Updated" date at the top of this page.
  • Sending notifications to all registered bmw2u members via email or in-platform notifications.
  • To display a clear notice on the bmw2u platform homepage at least 14 days before significant changes take effect.

Your continued use of the bmw2u platform after any changes take effect constitutes your acceptance of the revised Privacy Policy. We encourage you to review this page periodically to stay informed of our current policy.

12 Contact Us – Data Protection Officer

For any enquiries, complaints or requests relating to this Privacy Policy or bmw2u's use of your personal data, please reach us through the following channels:

  • Privacy Email: support@bmw2u.biz (use the subject line "Data Privacy Enquiry")
  • Live Chat: Available on the bmw2u platform, 24 hours a day, 7 days a week
  • Response Time: Privacy-related enquiries will be responded to within 3 business days

Bmw2u is committed to addressing all privacy-related enquiries and complaints seriously and within a reasonable timeframe. If you are not satisfied with our response, you have the right to lodge a complaint with the Department of Personal Data Protection (JPDP) Malaysia, the regulatory authority under PDPA 2010.

This Privacy Policy was last updated on January 2026 and takes effect immediately. This document is the Bahasa Malaysia (ms-MY) version, which is the official version applicable to all Malaysian members on the bmw2u platform.

Your Data Is Safe. Play with Peace of Mind at bmw2u.

Register a bmw2u account with confidence that your personal data is protected to the highest security standards. Deposit as little as RM 20 to get started – via Touch 'n Go, GrabPay or DuitNow.

256-bit SSL PDPA 2010 Compliant No Data Selling 18+ Only
Bahasa Melayu